What is the best way to secure an ember app?

There is an application for automatization of business on Ember. When the user statrts ithe application even if he isn't authorized yet, he has an access to the structure of application using which it is possible to understand certain business logic.

Question: how can I organize a backend authorization so that Ember is booted only after registration by means of a backend?

And Ember has to receive information about session.

in case of deploy the ember collects all scripts in one file. The user starts the application for the first time, he is intantly redirected to an authorization page. But already at this stage, without having logged in, the user can receive information on structure of application having researched js the file (what models we use, what roots do we have and so on.

The task is that before authorization the user couldn't research js -file in any way. So that application was started only after authorization tightening all logic.

Thanks